topic https://slaptijack.com in Network Access Control

3560CX Version 15.2(4)E2 radius config issue

philipvip — Mon, 11 Mar 2019 07:05:33 GMT

do NOT support the command below：

radius-server host x.x.x.x auth-port 1812 acct-port 1813

how to solve?

sw(config)#radius-server ?
accounting          Accounting information configuration
attribute           Customize selected radius attributes
authorization       Authorization processing information
backoff             Retry backoff pattern(Default is retransmits with
                      constant delay)
cache               AAA auth cache default server group
challenge-noecho    Data echoing to screen is disabled during
                      Access-Challenge
configure-nas       Attempt to upload static routes and IP pools at startup
dead-criteria       Set the criteria used to decide when a radius server is
                      marked dead
deadtime            Time to stop using a server that doesn't respond
directed-request    Allow user to specify radius server to use with `@server'
domain-stripping    Strip the domain from the username
load-balance        Radius load-balancing options.
optional-passwords The first RADIUS request can be made without requesting a
                      password
retransmit          Specify the number of retries to active server
retry               Specify how the next packet is sent after timeout.
source-ports        source ports used for sending out RADIUS requests
throttle            Throttle requests to radius server
timeout             Time to wait for a RADIUS server to reply
transaction         Specify per-transaction parameters
unique-ident        Higher order bits of Acct-Session-Id
vsa                 Vendor specific attribute configuration

sw(config)#radius-server

Hi,

Gagandeep Singh — Tue, 20 Sep 2016 21:19:34 GMT

Hi,

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960cx_3650cx/software/release/15-2_4_e/configurationguide/b_1524e_consolidated_3560cx_2960cx_cg/b_1524e_consolidated_3560cx_2960cx_cg_chapter_0110100.html#task_1091663

seems like it is supported as per document.

Regards

Gagan

PS: rate if it helps!!!

Hi

geder — Tue, 15 Nov 2016 10:44:52 GMT

You have to use the newer command radius server.

for example:

radius server ISE

address ipv4 10.10.10.1

key RADIUSKEY

Kind Regards

Gernot

https://slaptijack.com

Gagandeep Singh — Tue, 15 Nov 2016 14:16:28 GMT

https://slaptijack.com/networking/new-style-tacacs-configuration/

Keep above link for reference.

Regards

Gagan

PS: rate if it helps!!!

Re: Hi

tim.smith — Wed, 21 Feb 2018 01:54:27 GMT

new command didn't work for me either

Re: Hi

Octavian Szolga — Wed, 21 Feb 2018 15:28:57 GMT

Hi,

Have you enabled the AAA services?

(config)#aaa new-model

Thanks,
Octavian

Re: Hi

tim.smith — Wed, 21 Feb 2018 15:42:42 GMT

yeah, that was it. I figured it out last night.

dumb mistake